Location: London - Hybrid - 4 days per week onsite
Start Date: ASAP
Contract Rate: £460 per day inside IR35
Working Pattern: Night shift depending on the change scheduled
Duration: 6 months initially
Role Overview
Our client is seeking an experienced Senior Active Directory Engineer to support a large-scale Active Directory transformation programme. This is a hands-on contract role requiring strong technical expertise across Active Directory architecture, security, tiering, and remediation within a complex enterprise environment.
Key Responsibilities
* Review Active Directory tiering policies and implementation progress.
* Finalise outstanding tiering activities and validate business and application ownership.
* Assess cross-tier dependencies, risks, and security alignment.
* Review and remediate service accounts and scheduled tasks.
* Implement changes to Active Directory objects, groups, and user configurations.
* Validate functionality and access following change implementation.
* Conduct gap analysis between the current environment and target state.
* Produce technical documentation, remediation plans, and implementation activities.
Skills & Experience
Essential
* Extensive hands-on Microsoft Active Directory experience.
* Strong knowledge of AD architecture, including forests, domains, trusts, sites, replication, authentication, and authorisation.
* Experience designing and implementing enterprise Active Directory environments.
* Proven expertise in AD Tiering (Tier 0, Tier 1, Tier 2), privileged access segregation, and administrative role separation.
* Strong understanding of Organisational Units (OUs), Group Policy, delegation models, and administrative boundaries.
* Experience reviewing permissions, delegated administration, service accounts, and scheduled tasks.
* Ability to perform structured gap analysis and provide clear technical recommendations.
* Strong communication skills with technical and non-technical stakeholders.
Desirable
* Experience with Active Roles, PAM/PIM, or identity governance tools.
* Knowledge of Microsoft Entra ID and on-premises AD synchronisation.
* Experience with Jira, Azure DevOps, Kanban, and BMC Remedy.
* Ability to produce implementation-ready designs, runbooks, and remediation plans.
* Understanding of the business and application impact of Active Directory changes.
If you have the relevant skills and experience, please do apply promptly to be considered
Salary description
£460.00 - £460.00 per day